CVE-2014-1501

MEDIUM · 5.8 CVSS Gepubliceerd: 19-03-2014 CWE-264

Beschrijving

Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.

Vendors

Oracle Mozilla Google Suse

Affected products

Solaris Firefox Android Linux Enterprise Desktop Linux Enterprise Server Linux Enterprise Software Development Kit

References

lists.opensuse.org
www.mozilla.org
www.oracle.com
bugzilla.mozilla.org